Sr Information Security Analyst

WHO WE ARE

Empowering Connections Inspiring Possibility

SageNet is the single accountable partner unifying connectivity and digital experiences for widely distributed enterprises. We design deploy manage and monitor critical infrastructure across thousands of locations. Our U.S.-based Network Operations Centers operate 24/7 and our national field force delivers consistent outcomes from pilot to scale.

Trusted connections guide how we work and what we build. On the networking and digital side it means reliable secure and visible systems that keep every store every screen and every customer connected. On the human side it means transparent communication collaborative problem solving and long-term partnerships with our customers teammates and communities.

With a three-decade track record in managed services SageNet boasts a long-term customer base that includes some of the nations largest retail restaurant c-store and financial brands. Headquartered in Tulsa SageNet has regional offices in Atlanta Toronto and Washington D.C.

WHAT YOULL DO

The Senior Information Security Analyst plays a critical role in executing and maturing SageNets information security program. This position supports and extends the Director of Information Security by owning key security operations governance risk and compliance activities while acting as a delegated decision-maker for day-to-day security program execution.

This role balances hands-on operational responsibility with cross-functional leadership ensuring security controls are effective risks are managed and compliance obligationsparticularly PCI DSSare met. The position partners closely with IT Network Engineering Operations and Development teams to embed security into infrastructure applications and business processes.

Major Duties and Responsibilities

Security Operations

• Oversee SIEM alert tuning investigation triage and escalation in coordination with SOC providers
• Serve as the primary incident response coordinator during security events including investigation documentation and follow-up
• Develop and deliver security awareness and training initiatives
• Maintain operational security metrics and prepare reporting for leadership
• Partner with IT and system owners to manage IAM controls access reviews and privileged access governance

Security Architecture & Engineering

• Act as a subject matter expert for secure network architecture including firewalls VPNs SD-WAN wireless and authentication systems
• Lead firewall and network security review processes to ensure alignment with internal policies and PCI DSS requirements

Application Security

• Serve as the primary security stakeholder for internally developed and customer-facing applications
• Define and maintain application security requirements aligned with PCI DSS 4.0 OWASP ASVS and secure SDLC practices
• Partner with development and engineering teams to integrate security into the software development lifecycle
• Review application designs and architectures for security risks related to authentication authorization data handling and segmentation
• Oversee application vulnerability management activities including SAST DAST and software composition analysis (SCA)
• Coordinate remediation risk acceptance and exception tracking for application security findings
• Support and validate application-layer penetration testing and remediation efforts
• Act as a security escalation point for application-related incidents

Risk & Vulnerability Management

• Own the end-to-end vulnerability management lifecycle across infrastructure and applications
• Coordinate remediation efforts with Network Engineering IT Infrastructure Operations and Development teams
• Conduct targeted risk assessments and support enterprise risk management activities

Compliance & Governance

• Lead coordination of PCI DSS compliance activities including evidence collection control validation and engagement with external QSAs
• Manage the lifecycle of security policies and procedures ensuring alignment with regulatory and business requirements
• Support customer regulatory and internal audit activities
  
  

WHO YOU ARE

Required Qualifications

• 5 years of experience in information security network security or security governance roles
• Bachelors degree in information security Computer Science MIS or equivalent professional experience
• At least one security certification is required (e.g. Security CySA SSCP GSEC)
• Strong working knowledge of vulnerability management tools SIEM platforms and log analysis
• Solid understanding of firewall architectures and access control review methodologies
• Working knowledge of PCI DSS 4.0 and managed service provider shared-responsibility models
• Strong understanding of application security principles including common web vulnerabilities (OWASP Top 10)
• Experience coordinating remediation efforts across technical and non-technical teams
• Excellent communication documentation and analytical skills
• Ability to independently manage multiple priorities in a fast-paced environment

Preferred Qualifications

• Advanced security certifications such as CISSP CISM ISA/QSA or equivalent
• Familiarity with SD-WAN WAF IDS/IPS VPN identity management and network segmentation
• Experience supporting or reviewing SAST DAST and penetration testing activities
• Comfortable serving as a functional lead and escalation point across security domains
  
  

WHERE YOULL WORK

This role operates in a hybrid work model within a fast-paced managed services environment supporting large distributed customer bases. The position requires close collaboration with cross-functional teams and active leadership of security initiatives that improve operational maturity and reduce risk.

• This position may be performed in office or as a fully remote role based on business needs and candidate location
• Standard business hours with occasional after-hours availability required to support incident response or critical security events
• Professional work environment whether in office or remote requiring a dedicated and secure workspace
• Regular collaboration with technical and non-technical teams across multiple time zones
• Work performed primarily using computers secure systems and standard office equipment

PHYSICAL REQUIREMENTS

• Ability to sit for extended periods of time while working at a computer and participating in virtual meetings
• Frequent use of hands and fingers for typing navigating systems and using standard office equipment
• Ability to visually review and analyze information on computer screens for prolonged periods including logs dashboards and technical documentation
• Ability to communicate effectively verbally and in writing including participating in meetings training sessions and incident response activities
• Occasional ability to move within an office environment to attend meetings or collaborate with team members

CLASSIFICATION*: Exempt/Salaried
POSITION TYPE: Fulltime
TRAVEL REQUIREMENTS: Minimal
DIRECT REPORTS: None (acts as a functional lead for security processes)
SAFETY SENSITIVE: No

Ready to join a team that values trusted connections Apply now!

Equal Opportunity Employer

SageNet is committed to a skills-first approach when it comes to hiring. As such we value merit qualifications and business needs when making employment decisions. It is the policy of SageNet to provide equal employment opportunity to all employees and applicants without regard to race color sex (including pregnancy sexual orientation and gender identity) age religion national origin disability genetic information veteran or military status marital status or any other legally protected status. SageNet strictly prohibits and does not tolerate discrimination harassment or retaliation on the basis of any legally protected status.

SageNet will not discriminate against any employee or applicant because they are a disabled veteran recently separated veteran active-duty wartime or campaign badge veteran or Armed Forces services medal veteran in regard to any position for which the employee or applicant is qualified. As a federal contractor SageNet is committed to taking affirmative action to employ and advance in employment protected veterans and to treat qualified individuals without discrimination based on their status as protected veterans in all employment practices.

SageNet will not discriminate against any employee or applicant because of physical or mental disability in regard to any position for which the employee or applicant is qualified. As a federal contractor SageNet is committed to taking affirmative action to employ and advance individuals with disabilities and to treat qualified individuals without discrimination on the basis of their physical or mental disability in all employment practices. If you have a disability or special need that requires accommodation please let us know by contacting your HR representative or any member of management.

Legal Disclaimer
This job description is intended to provide a general overview of the position. It is not an exhaustive list of all responsibilities duties and skills required. SageNet reserves the right to modify this job description at any time with or without notice. Employment with SageNet is at-will meaning that either the employee or the company may terminate the employment relationship at any time with or without cause or notice. SageNet will provide reasonable accommodations for qualified individuals with disabilities.

As a managed services provider SageNet maintains a high level of information Security. SageNet has a published Information Security Policy and provides mandatory Security Awareness Training for all employees. SageNet requires that all employees adhere to published SageNet security policy failure to do so may result in termination of employment. The SageNet security program is only as strong as our people and as such it is the responsibility of all employees to protect corporate and customer data following best practices and policies

Required Experience:

Senior IC